Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa
File:                     3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (raw, json)
Hash identifier:          h1TE3m56WQ+gTVyqOOSf1UTeQzb1azE9LGSpzK549vA=
Subject key identifier:   05:2A:1B:2A:35:57:41:5A:65:0A:BD:77:DA:A5:D3:C7:13:60:2B:12
Certificate issuer:       /CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF
Certificate serial:       5969F43D5877A54DE47BD3D3D81A8DAB21E400B6
Authority key identifier: A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa
Signing time:             Sun 03 May 2026 02:12:45 +0000
ROA not before:           Sun 03 May 2026 02:07:45 +0000
ROA not after:            Sun 02 May 2027 02:12:45 +0000
asID:                     141673
IP address blocks:        103.163.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl
                          rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:69:f4:3d:58:77:a5:4d:e4:7b:d3:d3:d8:1a:8d:ab:21:e4:00:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF
        Validity
            Not Before: May  3 02:07:45 2026 GMT
            Not After : May  2 02:12:45 2027 GMT
        Subject: CN=052A1B2A3557415A650ABD77DAA5D3C713602B12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:1f:37:da:eb:f9:df:3f:8f:d4:cf:1f:b8:
                    9a:94:7e:2d:20:3a:54:92:be:17:15:04:ad:d6:bf:
                    4b:fb:dc:54:ae:eb:8f:92:83:24:ef:27:21:12:19:
                    c2:0d:f0:bd:58:36:d6:0f:5c:ee:c4:aa:71:56:af:
                    b2:99:fd:74:a0:29:8f:c0:a3:4c:45:14:2a:92:ca:
                    0c:c8:1f:e0:21:00:2a:e1:e5:66:4e:6f:de:1d:0a:
                    1e:73:b0:c8:21:b6:51:9d:b8:f5:c3:48:f3:4a:fa:
                    b2:73:13:59:06:31:38:0c:b2:d7:8e:ed:cc:5e:4a:
                    a6:64:dd:a6:b8:28:ad:02:12:f3:47:90:55:25:c0:
                    e7:e5:30:c7:53:28:88:ba:61:ee:e1:93:a5:e7:25:
                    d5:76:9c:d9:0e:6b:8d:db:ec:a6:8b:4a:ff:56:7d:
                    32:65:0c:c5:f1:96:09:ee:50:cc:ce:82:67:ed:b9:
                    a4:2a:22:04:ee:e8:36:68:29:a5:ad:f1:5c:05:d2:
                    b6:31:66:aa:16:49:92:fa:7a:31:9a:75:7f:b4:53:
                    a5:da:45:b3:59:af:11:9d:e0:53:1e:05:8c:67:20:
                    29:63:72:dc:5d:c3:f2:33:d0:cc:28:32:4d:ef:34:
                    83:e2:ff:15:84:63:6f:8d:e4:63:41:36:1a:0c:c9:
                    f3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2A:1B:2A:35:57:41:5A:65:0A:BD:77:DA:A5:D3:C7:13:60:2B:12
            X509v3 Authority Key Identifier:
                keyid:A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:56:af:ba:9d:12:c7:15:5d:02:14:bc:e3:47:62:a7:43:b2:
         de:57:25:d7:e2:a3:5d:1d:8d:bc:3b:2c:8b:b5:09:fc:c5:11:
         90:cd:e3:c5:df:e9:8c:ad:8e:9c:23:93:78:02:df:35:a4:44:
         58:5c:5d:3f:59:ec:4e:f7:45:66:92:4c:24:1e:2c:bb:3b:5a:
         82:a0:89:bd:f2:b0:bb:f0:05:26:dd:96:41:50:b7:37:2e:ed:
         c1:98:c0:db:59:cc:a2:4f:55:65:c9:a3:86:47:ec:bb:cb:b1:
         50:11:3c:12:30:fd:47:64:16:14:d3:69:2e:42:07:89:77:b3:
         77:9d:33:a8:51:c9:f6:7e:ab:b3:3c:2c:0a:70:32:9f:ad:66:
         d4:74:9d:68:af:4d:f7:6e:be:3b:26:1a:aa:c3:98:7a:9d:c0:
         36:d6:31:07:56:ea:98:db:8f:a9:ef:33:13:43:86:61:a4:67:
         35:14:0d:65:65:2d:9d:b4:44:f0:e5:84:48:19:f6:e9:70:39:
         14:2d:f6:e6:98:fa:f7:13:f6:c6:46:5e:8d:f6:a8:5a:1e:ad:
         03:82:92:c6:34:55:20:fe:ee:db:a3:35:19:89:b5:a0:89:01:
         63:44:46:58:32:d1:31:1e:6a:2a:3d:96:c5:cd:69:f7:2e:05:
         b3:1a:9f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:34 2026 by rpki-client